From 5667cc3df79242093f6fe56521785b7b28b45005 Mon Sep 17 00:00:00 2001 From: Camil Staps Date: Tue, 13 Oct 2015 20:59:20 +0200 Subject: Assignment 5 --- netsec-assignment5-S4498062/exercise2/exercise2c | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 netsec-assignment5-S4498062/exercise2/exercise2c (limited to 'netsec-assignment5-S4498062/exercise2/exercise2c') diff --git a/netsec-assignment5-S4498062/exercise2/exercise2c b/netsec-assignment5-S4498062/exercise2/exercise2c new file mode 100644 index 0000000..f16c731 --- /dev/null +++ b/netsec-assignment5-S4498062/exercise2/exercise2c @@ -0,0 +1,5 @@ +We could reject all packets with a spoofed IP address by only accepting packets +where the source address is in our subnet: + +# iptables -A OUTPUT -j DROP +# iptables -A OUTPUT -s 203.0.113.0/24 ACCEPT -- cgit v1.2.3